Search Results (Refine Search)
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2015-5828 |
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site. Published: October 09, 2015; 1:59:02 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-5780 |
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors. Published: October 09, 2015; 1:59:01 AM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-3785 |
The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors. Published: October 09, 2015; 1:59:00 AM -0400 |
V3.x:(not available) V2.0: 1.9 LOW |
CVE-2015-6311 |
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236. Published: October 08, 2015; 4:59:03 PM -0400 |
V3.x:(not available) V2.0: 6.1 MEDIUM |
CVE-2015-6310 |
The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632. Published: October 08, 2015; 4:59:01 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2015-5649 |
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges. Published: October 08, 2015; 4:59:00 PM -0400 |
V3.x:(not available) V2.0: 7.0 HIGH |
CVE-2015-7718 |
mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605. Published: October 06, 2015; 1:59:30 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2015-7717 |
mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 19573085, a different vulnerability than CVE-2015-6596. Published: October 06, 2015; 1:59:29 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
CVE-2015-7716 |
libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873. Published: October 06, 2015; 1:59:28 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-7600 |
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section. Published: October 06, 2015; 1:59:27 PM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-2015-6607 |
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586. Published: October 06, 2015; 1:59:25 PM -0400 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-6606 |
The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786. Published: October 06, 2015; 1:59:25 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
CVE-2015-6605 |
mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718. Published: October 06, 2015; 1:59:24 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2015-6604 |
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786. Published: October 06, 2015; 1:59:23 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-6603 |
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354. Published: October 06, 2015; 1:59:22 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-6601 |
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234. Published: October 06, 2015; 1:59:21 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-6600 |
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22882938. Published: October 06, 2015; 1:59:20 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-6599 |
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23416608. Published: October 06, 2015; 1:59:19 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-6598 |
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638. Published: October 06, 2015; 1:59:18 PM -0400 |
V3.x:(not available) V2.0: 10.0 HIGH |
CVE-2015-6596 |
mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717. Published: October 06, 2015; 1:59:17 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |